------------[ cut here ]------------
WARNING: CPU: 1 PID: 2745 at net/core/dev.c:2490 skb_warn_bad_offload+0x2b0/0x390 net/core/dev.c:2490
lo: caps=(0x000000a2803b7c69, 0x0000000000000000) len=4086 data_len=3768 gso_size=274 gso_type=4 ip_summed=0
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 2745 Comm: syz-executor.2 Not tainted 4.9.194+ #0
 ffff8801c70ef238 ffffffff81b67001 ffff8801c70ef300 ffffffff82a3b3c0
 00000000ffffffff 0000000000000001 0000000000000009 ffff8801c70ef318
 ffffffff813fef3a 0000000041b58ab3 ffffffff82e32f55 ffffffff813fed61
Call Trace:
 [<00000000bcfc725e>] __dump_stack lib/dump_stack.c:15 [inline]
 [<00000000bcfc725e>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<000000006d9042f8>] panic+0x1d9/0x3bd kernel/panic.c:180
 [<00000000be57b96a>] __warn.cold+0x2f/0x2f kernel/panic.c:546
 [<0000000033713a8a>] warn_slowpath_fmt+0xc2/0x100 kernel/panic.c:569
 [<00000000fcdeb2e1>] skb_warn_bad_offload+0x2b0/0x390 net/core/dev.c:2490
 [<0000000059d2f5aa>] __skb_gso_segment+0x597/0x6c0 net/core/dev.c:2796
 [<00000000f007e2f2>] skb_gso_segment include/linux/netdevice.h:4010 [inline]
 [<00000000f007e2f2>] validate_xmit_skb+0x4a1/0xaa0 net/core/dev.c:3032
 [<000000000247d35f>] __dev_queue_xmit+0x83e/0x1bd0 net/core/dev.c:3465
 [<00000000078b6a36>] dev_queue_xmit+0x18/0x20 net/core/dev.c:3506
 [<00000000d5af834a>] packet_snd net/packet/af_packet.c:2990 [inline]
 [<00000000d5af834a>] packet_sendmsg+0x24e8/0x47d0 net/packet/af_packet.c:3015
 [<00000000f9944e78>] sock_sendmsg_nosec net/socket.c:649 [inline]
 [<00000000f9944e78>] sock_sendmsg+0xbe/0x110 net/socket.c:659
 [<000000002f4db3c2>] kernel_sendmsg+0x44/0x50 net/socket.c:667
 [<00000000c987a9bf>] sock_no_sendpage+0x116/0x150 net/core/sock.c:2335
 [<0000000005a187f3>] kernel_sendpage+0x95/0xf0 net/socket.c:3326
 [<000000004edaa475>] sock_sendpage+0x8b/0xc0 net/socket.c:803
 [<00000000e835ca2c>] pipe_to_sendpage+0x28d/0x3d0 fs/splice.c:470
 [<000000001fef5821>] splice_from_pipe_feed fs/splice.c:521 [inline]
 [<000000001fef5821>] __splice_from_pipe+0x351/0x790 fs/splice.c:645
 [<00000000d236ba28>] splice_from_pipe+0x108/0x170 fs/splice.c:680
 [<0000000092dbfd59>] generic_splice_sendpage+0x3c/0x50 fs/splice.c:851
 [<00000000bfe81d6c>] do_splice_from fs/splice.c:870 [inline]
 [<00000000bfe81d6c>] do_splice fs/splice.c:1166 [inline]
 [<00000000bfe81d6c>] SYSC_splice fs/splice.c:1416 [inline]
 [<00000000bfe81d6c>] SyS_splice+0xe02/0x14c0 fs/splice.c:1399
 [<00000000f0368668>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
 [<00000000d81cec60>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Kernel Offset: disabled
Rebooting in 86400 seconds..